PkgRadar

npm · registry.npmjs.org

@gonzih/cc-tg

Manifest Codeless Dependency Stub: package ships no JS/TS source but declares 3 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape

Why PkgRadar flagged 0.9.61

SeveritySignalEvidence
mediumManifest Codeless Dependency Stubpackage ships no JS/TS source but declares 3 dependency(ies) (0 with loose/empty version specs) — dependency-confusion / install-chain loader shape · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.9.62Low risk02026-06-11
0.9.61Review152026-06-11
0.9.60Low risk02026-06-11
0.9.59Low risk02026-06-11
0.9.58Low risk02026-06-11
0.9.57Low risk02026-06-11
0.9.56Low risk02026-06-11
0.9.55Low risk02026-06-10
0.9.54Low risk02026-06-02
0.9.53Low risk02026-06-01
0.9.51Low risk02026-06-01
0.9.50Review242026-05-25
0.9.49Review242026-05-25
0.9.48Review242026-05-25
0.9.47Review242026-05-24
0.9.46Review242026-05-24
0.9.45Review242026-05-24
0.9.44Review242026-05-24
0.9.43Review242026-05-24
0.9.42Review242026-05-24
0.9.41Review242026-05-24
0.9.40Low risk02026-05-24
0.9.39Review242026-05-24
0.9.38Review242026-05-24
0.9.37Review242026-05-24
0.9.36Low risk02026-05-24
0.9.35Review242026-05-24
0.9.34Review242026-05-24

Block this in CI

PkgRadar gates @gonzih/cc-tg (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @gonzih/[email protected]
Start free — 25 scans / moView full evidence